| |
 |
| Computer Forensics |
|
Rachlin Computer Forensics is a team of
professionals committed to preserving and analyzing evidence and preventing data
destruction. They deliver their results in an understandable, usable format, so you
spend less time reviewing irrelevant data and more time focusing on your case.
Email, documents and deleted information may be stored in unexpected locations,
and our computer forensics examiners have the experience to find these caches.
Data may be contained in servers, workstations, PDAs, cell phones, CD-ROMs, USB
memory devices, backup tapes and archiving systems.
Rachlin Computer Forensics provides assistance with a variety of matters relating
to electronic data, including:
- Pre-litigation support
- Electronic production and evidence preservation
- Computer investigation
- Incident response
- Education
- Information systems auditing
Our clients turn to us to help them understand the value of electronic
information and how it can be used to their advantage. We help them ask
the right kind of questions, so they may receive the relevant information
they need to build an effective case. And if the other side says the data
does not exist, we can help verify that they are, indeed, telling the
whole story.
|
Intentional destruction. "Wiping" software - utilities that can
permanently eliminate evidence - are common. In fact, Mac OS X has a free, built-in
utility. Also, tools such as Citrix, VNC, and Go2MyPC enable one to delete data
remotely. However, even when the files themselves are irretrievable, evidence that
deletion occurred may be valuable.
|
Accidental destruction. Evidence may be deleted unintentionally through
automated maintenance routines such as disk optimization and automatic
emptying of email "trash bins." An IT department may unintentionally destroy
evidence while following standard policies and procedures which dictate that
backup tapes should be reused.
|
|
|
|
|
